writeups.xyz / Account takeover via HTTP Request Smuggling

Submitter : c2a

Date: 3 January 2020

Bounty : undisclosed

Vulnerabilities :

• HTTP Request Smuggling
• Account Takeover
• Open Redirect
• Internal Header Disclosure

Programs :

• Undisclosed

Authors :

• Hipotermia (@_Hipotermia_)

Link :
https://hipotermia.pw/bb/http-desync-account-takeover